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REMARKS 

This Application has been carefully reviewed in light of the Office Action mailed July 24, 
2007. Claims 1-41 were pending in the Application. In the Office Action, Claims 1-41 were 
rejected. In order to expedite prosecution of this Application, Applicants amend Claim 37. 
Claims 42-46 are new. Thus, Claims 1-46 remain pending in the Application. Applicants 
respectfully request reconsideration and favorable action in this case. 

In the Office Action, the following actions were taken or matters were raised: 

SECTION 102 REJECTIONS 

Claims 1, 3-26, 28-35 and 37-41 were rejected under 35 U.S.C. 102(e) as being 
anticipated by U.S. Patent Publication No. 2005/0005094 issued to Jamieson et al. (hereinafter 
il Jamieson"). Applicants respectfully traverse this rejection. 

Of the rejected Claims, Claims 1, 11, 16, 25, 31, and 37 are independent. Independent 
Claim 1 recites "a security module adapted to authenticate an identity of the user and, in 
response to user authentication, automatically generate , transparently to the user, device 
credential data verifiable by the authentication system to enable user access to the self- 
managed device" (emphasis added). Applicants respectfully submit that Jamieson does not 
appear to disclose or even teach all the limitations of Claim 1. For example, Jamieson appears 
to disclose a system having plurality of domains each having a credential record (e.g., a user 
identification and password combination) used to enable a user to gain access to a particular 
domain. (Jamieson, paragraph 0039). Jamieson appears to disclose that, when a user initially 
accesses a first domain, the first domain verifies the credentials of the user requesting access 
using the credential record. (Jamieson, paragraph 0039). Thereafter, using a credential store 
(e.g., a storage medium listing the credential record for each domain that the user has access 
to), the first domain of Jamieson appears to look up and identify the corresponding credentials 
for a second domain in Jamieson in which the user is requesting access. (Jamieson, paragraph 
0050). Thus, the Jamieson system appears to use a stored table of credentials to look up the 
corresponding credentials for accessing the different domains in Jamieson. Therefore, the 
credentials being looked up in Jamieson appear to have been previously created and stored 
and, thus, are not generated. Nowhere in Jamieson does there appear to be any disclosure or 
even suggestion of a security module adapted to " generate ," let alone " automatically 
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generate ... device credential data" as recited by Claim 1 (emphasis added). Thus, Jamieson 
does not anticipate Claim 1. Therefore, for at least this reason, Applicants respectfully request 
that the rejection of Claim 1 be withdrawn. 

Independent Claims 11, 16, 31, and 37 each generally recite generating device 
credential data, and independent Claim 37 recites "if successfully authenticated, generating and 
transmitting , transparently to the user, device credential data to a self-managed device for 
authentication by the self-managed device to enable the user to access the self-managed 
device" (emphasis added). For at the reasons discussed above in connection with Claim 1, 
Applicants respectfully submit that independent Claims 11, 16, 31, and 37 are also not 
anticipated by Jamieson. 

Independent Claim 25 recites "an activation/deactivation module accessible via a 
networked administration client, the activation/deactivation module adapted to interface with the 
security module in response to a reguest by the administration client to activate , transparently to 
the user, an authentication system of a self-managed device to control user access to the self- 
managed device" (emphasis added). Applicants respectfully submit that Jamieson does not 
disclose or even suggest all the limitations of Claim 25. Specifically, Applicants respectfully 
submit that Jamieson does not appear to disclose an "activation/deactivation module" as recited 
by Claim 25. For example, as indicated above, Jamieson appears to disclose a plurality of 
domains each having a credential record used to enable a user to gain access to a particular 
domain. (Jamieson, paragraph 0039). The credential record of Jamieson appears to verify a 
matching user identifier and password combination. (Id.). However, nowhere in Jamieson does 
there appear to be any disclosure or even suggestion of a separate " activation/deactivation 
module accessible via a network administration client... [and] adapted to interface with the 
security module, " let alone an activation/deactivation module interfacing with the security 
module " in response to a reguest by the administration client to activate ... an authentication 
system of a self-managed device " as recited by Claim 25 (emphasis added). In the Office 
Action, the Examiner asserts that "it is inherent that the authentication system of the self- 
managed device is activated because it would need to be active in order to control user access 
and verify credentials." (Office Action dated July 24, 2007, page 4). However, an active device 
is not the same as an the authentication system that is accessible by a networked 
administration client and is activated " in response to a reguest by the administration client" as 
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recited by Claim 25 (emphasis added). Therefore, Applicants respectfully submit that Jamieson 
does not anticipate Claim 25. Thus, for at least these reasons, Applicants respectfully request 
that the rejection of Claim 25 be withdrawn. 

Claims 3-10, 12-15,17-24, 26, 28-30, 32-35, and 38-41 that depend, respectively, from 
independent Claims 1, 11, 16, 25, 31, and 37 are also patentable over the cited references at 
least because they incorporate the limitations of respective Claims 1, 11, 16, 25, 31, and 37 
and also additional elements that further distinguish the references. Therefore, Applicant 
respectfully requests that the rejection of Claims 1, 3-26, 28-35 and 37-41 be withdrawn. 

SECTION 103 REJECTIONS 

Claims 2, 27 and 36 were rejected under 35 U.S.C. 103(a) as being unpatentable over 
Jamieson in view of U.S. Patent Publication No. 2003/0226036 issued to Bivens et al. 
(hereinafter "Bivens"). Applicant respectfully traverses this rejection. 

Claims 2, 27, and 36 depend respectively from independent Claims 1, 25, and 31. As 
shown above, Claims 1, 25, and 31 are patentable over Jamieson. Therefore, for at least this 
reason, Claims 2, 27, and 36 which depend therefrom are also patentable over Jamieson. 
Bivens does not appear to remedy, nor does the Examiner rely on Bivens to remedy, at least 
the deficiencies of Jamieson indicated above. Accordingly, for at least this reason, Applicant 
respectfully requests that the rejection of Claims 2, 27, and 36 be withdrawn. 

NEW CLAIMS 

Applicants add Claims 42-46. New Claims 42-46 contain no new matter and Applicant 
respectfully submits that new Claims 42-46 are patentable over the applied references. 
Therefore, Applicant respectfully request allowance of new Claims 42-46. 
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CONCLUSION 

Applicant has made an earnest attempt to place this case in condition for immediate 
allowance. For the foregoing reasons and for other reasons clearly apparent, Applicant 
respectfully requests reconsideration and full allowance of all pending claims. 

An excess claims fee of $460.00 is believed due. The Commissioner of Patents and 
Trademarks is hereby authorized to charge Deposit Account No. 08-2025 of Hewlett-Packard 
Company the amount of $460.00 to satisfy the excess claims fee. If, however, Applicant has 
miscalculated the fee due with this Response, the Commissioner is hereby authorized to charge 
any fees or credit any overpayment associated with this Response to Deposit Account No. 08- 
2025 of Hewlett-Packard Company. 



Date: October 24, 2007 

Hewlett-Packard Company 
Intellectual Property Administration 
P. O. Box 272400 
Fort Collins, CO 80527-2400 
Tel. 970-898-7917 



Respectfully submitted, 




Hope*Shimabuku 
Reg. No. 57.072 
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